150 



Hacker 



Intrusion Attennpt 



1/6 



Intrusion 
Detection 
System 



Authorized 
Communications 



140 

IVIonitoring /z/ 
Center 




^/ Network y 



120 



Analysis yl/ 
System 



Intrusion Attempt- 



Target 



130 



Target 



130 



Target 



130 



100 



Fig. 1 



2/6 



140 

Monitoring /]/ 
Center 





Intrusion Attempt 



A/ 



120 



Analysis /V 
System 



Intrusion 
Detection 
System 



Authorized 
Communications 



Intrusion Attempt 



-Intrusion Attempt 



Intrusion 
Detection 
System 



170 

w 



Target 



130 



5 



Target 



130 



Target 



-Intrusion Attempt^ 



130 

w 



Internal Hacker 



160 

w 



200 



Fig. 2 



3/6 




1100 



I/O Interface 



Controller 



1110 

w 



Memory 



1120 



A/ 



Intrusion 
Detection 
System 



1130 



Communications 
Managemant 
System 



Fig. 3 



4/6 




120 

A/ 



1200 




Memory 



1220 



Database 



1230 



1240 



Intrusion 
Reaction 
Coordination 
System 



Fig. 4 



5/6 



S100 



Begin 



Analyse 
Incoming 
Communications 



8110 

w 



S120 
' Unauthorized 



NCommunication'?/ 



No 
4- 



Redirect 
Communications 
To Analysis 
System 



S130 




S1 



Forward 
Communications To 
Specified Destination 



S180 



Fig. 5 



Begin 



Verify 
intrusion 
Attempt 



S200 



S210 



6/6 



S220 



Jnautl-iorize( 
Attempt? 




Fig. 6 



